SepNotifyFileSystems
VOID __stdcall SepNotifyFileSystems(VOID *Context){
_ETHREAD *CurrentThread;
void(__fastcall **i)(char *);
PVOID j;
VOID *v5;
CurrentThread = (_ETHREAD *)KeGetCurrentThread();
--CurrentThread->Tcb.KernelApcDisable;
ExAcquireFastMutexUnsafe((PFAST_MUTEX)((char *)&stru_140CF2E80 + 5144));
for( i = (void(__fastcall **)(char *))SeFileSystemNotifyRoutinesHead; i; i = (void(__fastcall **)(char *))*i )
i[1]((char *)Context + 32);
for( j = SeFileSystemNotifyRoutinesExHead; j; j = *(PVOID *)j )
(*((void(__fastcall **)(char *, _QWORD, _QWORD))j + 1))(
(char *)Context + 32,
*((_QWORD *)Context + 5),
*((_QWORD *)j + 2));
ExReleaseFastMutexUnsafe((PFAST_MUTEX)((char *)&stru_140CF2E80 + 5144));
KeLeaveCriticalRegionThread(KeGetCurrentThread());
v5 = (VOID *)*((_QWORD *)Context + 5);
if( v5 )
ObfDereferenceObjectWithTag(v5, 0x53466553ui64);
ExFreePoolWithTag(Context, 0);
}Referenced by:
No references.